This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft File: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft (raw, json) Hash identifier: tL80ICXwlO7/xNNFR5dvwUOC/A+P9rxewpgmunimqRU= Subject key identifier: C4:61:6E:2D:D4:4B:6F:3F:5E:DE:F8:B5:AC:86:C6:EF:EB:5C:6D:53 Authority key identifier: D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D Certificate issuer: /CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d Certificate serial: 019B4438B7EF072269BF86EE2F5D63E97E6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft Manifest number: 171D Signing time: Mon 22 Dec 2025 04:02:06 +0000 Manifest this update: Mon 22 Dec 2025 04:02:06 +0000 Manifest next update: Tue 23 Dec 2025 04:02:06 +0000 Files and hashes: 1: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl (hash: 9AZ6MBa9+lqGXbbAq9ZEgXjIoKR16hE7vh6FGb3NnnM=) 2: C2lOXCmp50JxgRXiUYxe6B0_iZ4.roa (hash: 8UNsnDOqjjcGGg587BCaothe5brbvtl6qwWOiSpwE6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:b7:ef:07:22:69:bf:86:ee:2f:5d:63:e9:7e:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d Validity Not Before: Dec 22 04:02:06 2025 GMT Not After : Dec 23 04:02:06 2025 GMT Subject: CN=c4616e2dd44b6f3f5edef8b5ac86c6efeb5c6d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:32:8b:b3:78:0d:4a:07:70:d1:80:44:07:15: 3e:37:d9:f5:6d:30:67:08:70:33:0b:19:9a:ca:9e: 0d:71:9c:76:f6:51:35:89:74:f9:9f:50:44:c7:49: 74:00:74:96:e0:61:69:08:60:56:ff:e9:48:59:5d: fa:ed:fd:c5:08:53:bb:f9:04:c5:4f:88:d1:e3:86: 68:40:94:9f:4e:3b:f0:a8:15:69:35:ed:73:92:9c: a2:a9:25:c1:a3:36:2b:33:72:01:2c:e5:97:10:aa: 4c:ab:e7:c1:8b:bc:0c:ad:ff:06:c1:64:30:28:37: 05:46:0a:d2:66:45:0e:03:ae:e8:28:65:ed:c9:53: ae:2e:94:34:1f:b8:2b:5a:c7:9b:02:4e:cb:32:59: b7:d0:bf:e7:53:39:0a:74:c9:2c:bc:a2:e0:30:75: a1:d0:68:ae:84:77:7a:89:dd:93:a1:f7:b4:61:a1: f5:79:e0:a1:45:29:8d:26:13:5e:3c:02:56:8e:72: bc:58:b8:ae:dd:0f:1c:b1:c8:a2:72:d5:5c:0d:a4: 35:fd:7a:e0:58:a3:a5:86:da:af:d7:e4:fe:22:31: 52:eb:51:61:9b:12:f5:cd:26:95:b0:5d:7a:13:4d: cd:7e:f7:b5:b2:c4:42:12:19:ce:ed:22:80:9f:0e: 69:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:61:6E:2D:D4:4B:6F:3F:5E:DE:F8:B5:AC:86:C6:EF:EB:5C:6D:53 X509v3 Authority Key Identifier: keyid:D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:84:28:30:97:02:7e:d9:55:f5:9c:ad:12:e8:83:41:e9:f7: 02:06:89:59:03:4e:a1:c0:f9:69:f2:fd:cf:9c:cd:28:a1:ff: 1e:c3:86:8c:87:d6:c8:5b:9b:23:a7:ca:3b:7e:c5:73:a3:ed: da:29:30:a7:ec:1a:03:b3:68:cd:5e:0c:fe:55:dd:83:74:f1: 2e:0f:4f:42:f6:79:ac:1a:d9:fe:f7:41:df:19:6b:fc:ad:cb: b2:36:f5:3a:39:8b:13:f7:6a:af:23:e9:1d:61:d9:31:6d:8a: f5:93:00:95:a8:bb:0d:cb:ee:37:47:fc:70:2b:f0:89:8c:0d: 97:d3:6f:b4:04:97:84:78:37:cd:9a:35:4f:98:01:6b:ff:7a: 98:d9:0f:e8:45:e2:bb:15:77:f8:e9:7b:10:36:0d:04:20:b6: 5c:ec:5f:49:49:db:c7:86:ca:d2:e3:b6:16:c2:15:21:29:f5: 9d:a3:40:c4:2f:2c:2b:d5:9b:f8:bd:37:23:40:05:5c:a0:e8: 38:bb:10:a0:ed:23:29:2a:bf:cf:68:34:25:8c:71:70:13:e8: 78:7f:db:c3:ab:02:27:23:15:16:55:72:3e:09:72:0a:c1:ab: 9b:45:e0:e5:a1:18:0b:91:4b:aa:6b:65:19:a9:84:a6:cd:de: 0d:6c:32:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOLfvByJpv4buL11j6X5sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NWE4ZDkxZmU0NGYxYTk2MzlhZWQ1NjFjMWJjYWZjYmYx MGIyNWQwHhcNMjUxMjIyMDQwMjA2WhcNMjUxMjIzMDQwMjA2WjAzMTEwLwYDVQQD EyhjNDYxNmUyZGQ0NGI2ZjNmNWVkZWY4YjVhYzg2YzZlZmViNWM2ZDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojKLs3gNSgdw0YBEBxU+N9n1bTBn CHAzCxmayp4NcZx29lE1iXT5n1BEx0l0AHSW4GFpCGBW/+lIWV367f3FCFO7+QTF T4jR44ZoQJSfTjvwqBVpNe1zkpyiqSXBozYrM3IBLOWXEKpMq+fBi7wMrf8GwWQw KDcFRgrSZkUOA67oKGXtyVOuLpQ0H7grWsebAk7LMlm30L/nUzkKdMksvKLgMHWh 0GiuhHd6id2Tofe0YaH1eeChRSmNJhNePAJWjnK8WLiu3Q8csciictVcDaQ1/Xrg WKOlhtqv1+T+IjFS61FhmxL1zSaVsF16E03Nfve1ssRCEhnO7SKAnw5p0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRhbi3US28/Xt74tayGxu/rXG1TMB8GA1UdIwQY MBaAFNRajZH+RPGpY5rtVhwbyvy/ELJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUZxTmtmNUU4YWxqbXUxV0hCdktfTDhRc2wwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mYWM0MDYtMWQ5Yi00NjFkLTg1NWIt NTg4NjVkMWUxNGUwLzEvMUZxTmtmNUU4YWxqbXUxV0hCdktfTDhRc2wwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mYWM0MDYtMWQ5Yi00NjFkLTg1NWItNTg4NjVkMWUxNGUw LzEvMUZxTmtmNUU4YWxqbXUxV0hCdktfTDhRc2wwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmoQoMJcC ftlV9ZytEuiDQen3AgaJWQNOocD5afL9z5zNKKH/HsOGjIfWyFubI6fKO37Fc6Pt 2ikwp+waA7NozV4M/lXdg3TxLg9PQvZ5rBrZ/vdB3xlr/K3Lsjb1OjmLE/dqryPp HWHZMW2K9ZMAlai7DcvuN0f8cCvwiYwNl9NvtASXhHg3zZo1T5gBa/96mNkP6EXi uxV3+Ol7EDYNBCC2XOxfSUnbx4bK0uO2FsIVISn1naNAxC8sK9Wb+L03I0AFXKDo OLsQoO0jKSq/z2g0JYxxcBPoeH/bw6sCJyMVFlVyPglyCsGrm0Xg5aEYC5FLqmtl GamEps3eDWwyvw== -----END CERTIFICATE-----Generated at Mon Dec 22 08:49:04 2025 by rpki-client